Zte ZXR10 - Aaa Authentication; Aaa Authorization

ZXR10CommandManual(SecurityVolume)
Related
Commands
tacacsenable
aaaauthentication
PurposeUsethiscommandtocongureauthenticationmethodlist.Delete
theauthenticationmethodlistwiththenoformofthiscommand.
CommandModesGlobalconguration
Syntaxaaaauthentication{enable|login}default{{[local]|[group
<group-name>]}[none]|none}
noaaaauthentication{enable|login}default
Syntax
Description
enableEnablestheauthenticationmethod,whichis
usedbyuserstoenterprivilegedconguration
mode
loginLoginidentity—distinguishingmethod,which
isusedbyuserstotelnetlogin
defaultDefaultauthenticationmethod
localLocalauthentication
group<group-name>
TACACS+authentication,TACACS+server
groupname
none
Authenticationisnotconducted
InstructionsIfuser-authentication-typeTACACS+isconguredbutAAAau-
thenticationlistisnotcongured,thesystemdoesnotthinkthat
theauthenticationpasses.
ExampleThisexampledescribeshowtoenableauthenticationmethodlist.
Localauthenticationisexecutedrst.Iflocalauthenticationfails,
continuestheauthenticationonTACACS+servergrouptacNtTac.
Similarly,whenTACACS+servergroupisinvalid,uselocalauthen-
tication.
ZXR10(config)#aaaauthenticationenabledefaultlocalgrouptacNtTac
ZXR10(config)#noaaaauthenticationenabledefault
ZXR10(config)#aaaauthenticationenabledefaultgrouptacNtTaclocal
Related
Commands
tacacsenable
aaagroup-servertacacs+
user-authentication-type
aaaauthorization
PurposeUsethiscommandtocongureloginauthorizationmethodlist.
UsersuseTACACS+authenticationmethodfortelnetlogin.Delete
theauthorizationmethodlistwiththenoformofthiscommand.
118CondentialandProprietaryInformationofZTECORPORATION